asterisk-Invite.txt

Due to many requests for the POC and since most Asterisk systems should have been patched by now, please find in this message the POc for our advisory posted on http://seclists.org/fulldisclosure/2007/Mar/0315.html usage example: perl asterisk-Invite.pl 192.168.1.104 5060 userX 192.168.1.2 5060...

Asterisk <= 1.2.16 / 1.4.1 SIP INVITE Remote Denial of Service Exploit

No description provided by source. !/usr/bin/perl perl asterisk-Invite.pl 192.168.1.104 5060 userX 192.168.1.2 5060 userY use IO::Socket::INET; die "Usage $0 dst dport dusername src sport susername" unless $ARGV5; $socket=new IO::Socket::INET-newPeerPort=$ARGV1, Proto='udp',...

Asterisk SIP响应远程拒绝服务漏洞

Asterisk是一款PBX系统的软件，运行在Linux系统上，支持使用SIP、IAX、H323协议进行IP通话。 Asterisk在处理远程系统的SIP回复时存在拒绝服务漏洞，如果远程系统所发送的SIP回复中包含有SIP Response code 0的话，就会导致服务崩溃。 Asterisk Asterisk 1.4.x 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://ftp.digium.com/pub/asterisk/releases/asterisk-1.4.2.tar.gz...

Asterisk 1.2.161.4.1 - SIP INVITE Remote Denial of Service

Asterisk 1.2.161.4.1 - SIP INVITE Remote Denial of Service !/usr/bin/perl perl asterisk-Invite.pl 192.168.1.104 5060 userX 192.168.1.2 5060 userY use IO::Socket::INET; die "Usage $0 " unless $ARGV5; $socket=new IO::Socket::INET-newPeerPort=$ARGV1, Proto='udp', PeerAddr=$ARGV0; $msg="INVITE...

Asterisk 1.2.16/1.4.1 - SIP INVITE Remote Denial of Service

!/usr/bin/perl perl asterisk-Invite.pl 192.168.1.104 5060 userX 192.168.1.2 5060 userY use IO::Socket::INET; die "Usage $0 " unless $ARGV5; $socket=new IO::Socket::INET-newPeerPort=$ARGV1, Proto='udp', PeerAddr=$ARGV0; $msg="INVITE sip:$ARGV2@$ARGV0:$ARGV1 SIP/2.0\r\nVia: SIP/2.0/UDP...

Asterisk <= 1.2.16 / 1.4.1 SIP INVITE Remote Denial of Service Exploit

Exploit for multiple platform in category dos / poc ====================================================================== Asterisk " unless $ARGV5; $socket=new IO::Socket::INET-newPeerPort=$ARGV1, Proto='udp', PeerAddr=$ARGV0; $msg="INVITE sip:$ARGV2@$ARGV0:$ARGV1 SIP/2.0\r\nVia: SIP/2.0/UDP...

Asterisk &lt;= 1.2.16 / 1.4.1 SIP INVITE Remote Denial of Service Exploit

No description provided by source. !/usr/bin/perl perl asterisk-Invite.pl 192.168.1.104 5060 userX 192.168.1.2 5060 userY use IO::Socket::INET; die "Usage $0 dst dport dusername src sport susername" unless $ARGV5; $socket=new IO::Socket::INET-newPeerPort=$ARGV1, Proto='udp', PeerAddr=$ARGV0;...

Asterisk SIP通道驱动应答零代码远程拒绝服务漏洞

Asterisk是一个开放源代码的软件VoIP PBX系统。 Asterisk处理包含code 0的应答消息存在问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 从远程系统接收到部分SIP应答如SIP Response code 0，可导致Asterisk崩溃，造成拒绝服务攻击。 Asterisk Asterisk 1.4.1 Asterisk Asterisk 1.2.16 Asterisk Asterisk 1.2.15 Asterisk Asterisk 1.2.14 Asterisk Asterisk 1.2.13 Asterisk Asterisk 1.2.11...

CVE-2007-1595

The Asterisk Extension Language AEL in pbx/pbxael.c in Asterisk does not properly generate extensions, which allows remote attackers to execute arbitrary extensions and have an unknown impact by specifying an invalid extension in a certain form...

CVE-2007-1594

The handleresponse function in chansip.c in Asterisk before 1.2.17 and 1.4.x before 1.4.2 allows remote attackers to cause a denial of service crash via a SIP Response code 0 in a SIP packet...

CVE-2007-1594

The handleresponse function in chansip.c in Asterisk before 1.2.17 and 1.4.x before 1.4.2 allows remote attackers to cause a denial of service crash via a SIP Response code 0 in a SIP packet...

CVE-2007-1595

The Asterisk Extension Language AEL in pbx/pbxael.c in Asterisk does not properly generate extensions, which allows remote attackers to execute arbitrary extensions and have an unknown impact by specifying an invalid extension in a certain form...

Code injection

The Asterisk Extension Language AEL in pbx/pbxael.c in Asterisk does not properly generate extensions, which allows remote attackers to execute arbitrary extensions and have an unknown impact by specifying an invalid extension in a certain form...

CVE-2007-1595

The Asterisk Extension Language AEL in pbx/pbxael.c in Asterisk does not properly generate extensions, which allows remote attackers to execute arbitrary extensions and have an unknown impact by specifying an invalid extension in a certain form...

Code injection

The handleresponse function in chansip.c in Asterisk before 1.2.17 and 1.4.x before 1.4.2 allows remote attackers to cause a denial of service crash via a SIP Response code 0 in a SIP packet...

CVE-2007-1595

The Asterisk Extension Language AEL in pbx/pbxael.c in Asterisk does not properly generate extensions, which allows remote attackers to execute arbitrary extensions and have an unknown impact by specifying an invalid extension in a certain form...

CVE-2007-1594

The handleresponse function in chansip.c in Asterisk before 1.2.17 and 1.4.x before 1.4.2 allows remote attackers to cause a denial of service crash via a SIP Response code 0 in a SIP packet...

CVE-2007-1595

The CVE-2007-1595 entry concerns the Asterisk Extension Language (AEL) in pbx/pbx_ael.c, where extensions are not properly generated. The flaw allows remote attackers to cause execution of arbitrary extensions by supplying an invalid extension in a specific form, with an unknown overall impact as...

CVE-2007-1594

CVE-2007-1594 affects Asterisk; the handle_response function in chan_sip.c allows remote attackers to crash the server by sending a SIP response with code 0. Affected products are Asterisk versions older than 1.2.17 and older than 1.4.2 in the 1.4.x line. Public references (SUSE, Gentoo, and vend...

CVE-2007-1595

The Asterisk Extension Language AEL in pbx/pbxael.c in Asterisk does not properly generate extensions, which allows remote attackers to execute arbitrary extensions and have an unknown impact by specifying an invalid extension in a certain form...